This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer (raw, json) Hash identifier: /j78VhYLzeb9ssjwN0pys6ukkrEdHSPWj2Osjl/T7ak= Subject key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A7FE3BB0ADC051AB379EFD894E1B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201626 IP: 2001:678:780::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:7f:e3:bb:0a:dc:05:1a:b3:79:ef:d8:94:e1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:00:21:04:03:0c:f6:59:7d:71:3d:b1:86: 17:e1:93:d0:79:ef:45:9e:df:48:5b:ba:ca:87:da: 6d:de:00:47:52:f3:b5:dd:1d:8c:4d:28:a2:90:11: 75:c0:d0:b5:ee:74:a9:ee:1a:0a:78:e7:90:30:49: ea:71:07:7b:d7:6b:3b:5e:89:a1:e5:c8:15:74:b0: b8:66:a9:ad:ac:9c:36:4d:eb:47:f6:2d:a5:ae:c9: 7e:7e:58:7a:2a:a6:f0:4b:9c:68:4c:26:a1:1f:d9: 4b:f4:fb:a5:ca:b4:47:5b:05:a6:a5:8c:86:19:72: 20:b0:d9:16:80:83:89:db:39:32:ed:ee:62:ab:c1: 5d:5b:a0:f8:f7:10:97:65:9e:1b:57:84:7b:e9:06: d9:31:6f:1b:14:d5:7f:85:7a:6f:b6:ca:dc:b1:e3: 6a:87:61:d8:d0:1b:62:a9:a0:2e:ba:39:9e:79:9d: e8:c4:fa:53:87:85:73:a7:af:cf:bb:e6:eb:33:36: ee:f6:5b:15:13:36:03:cb:2c:66:cc:6a:6f:f8:08: 55:89:a7:40:99:00:ad:20:99:f0:f3:9e:24:0f:9d: 1a:df:45:13:7d:95:f2:6b:1e:01:33:1b:9d:f1:9a: ae:a2:20:5b:5d:11:f0:86:a5:7a:fb:7a:a3:0e:42: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:780::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201626 Signature Algorithm: sha256WithRSAEncryption 69:2f:b7:31:fe:ac:3a:ca:8a:bf:64:65:40:02:5f:ad:1c:6a: 5b:b1:91:70:29:2d:07:fa:2b:2a:5c:57:a7:ca:d5:30:39:ac: 5a:1f:12:82:5e:0b:fa:2b:57:a9:d3:93:55:f3:bc:95:a4:af: 6c:95:62:b0:05:dc:dc:ef:5e:03:5f:c7:9e:bf:ff:20:54:e6: 73:c0:fa:93:88:cf:47:2d:6e:62:25:a1:1d:03:69:2f:1e:2d: 9f:89:14:67:f9:76:d1:03:70:1b:76:c4:d9:b6:b8:c8:7b:05: c9:97:8a:87:46:4b:cd:2f:af:bf:f4:c9:1d:a1:8a:e8:03:99: 93:e6:52:9e:e8:2a:80:c5:ad:d4:9b:4d:ea:7f:69:78:0a:f1: cd:c2:3d:48:b6:59:5d:49:b8:92:81:21:c4:97:85:65:3b:d2: ec:e2:5b:52:78:89:34:f9:88:17:c8:ff:fb:3a:6c:b3:fd:57: 82:f4:b8:05:25:e1:ae:ab:a7:f5:e9:aa:20:b5:f8:76:cc:74: 84:ab:2e:fb:7a:17:38:74:34:25:44:df:53:c4:fa:65:fa:38: 8c:67:26:c2:1b:c1:df:e7:cf:3c:29:b6:8f:b3:04:a9:61:2c: 44:d9:ee:40:3b:f2:7f:57:30:71:5b:3c:e6:47:57:58:3b:4c: 57:17:2f:49 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6Wn/juwrcBRqzee/YlOGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGZjZGU0NTMwNWJkMGNjOGQyNWQ3YzZlZGNhNzE5MTM2ZjU2MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h8AIQQDDPZZfXE9sYYX4ZPQee9F nt9IW7rKh9pt3gBHUvO13R2MTSiikBF1wNC17nSp7hoKeOeQMEnqcQd712s7Xomh 5cgVdLC4ZqmtrJw2TetH9i2lrsl+flh6KqbwS5xoTCahH9lL9PulyrRHWwWmpYyG GXIgsNkWgIOJ2zky7e5iq8FdW6D49xCXZZ4bV4R76QbZMW8bFNV/hXpvtsrcseNq h2HY0BtiqaAuujmeeZ3oxPpTh4Vzp6/Pu+brMzbu9lsVEzYDyyxmzGpv+AhViadA mQCtIJnw854kD50a30UTfZXyax4BMxud8ZquoiBbXRHwhqV6+3qjDkIntQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJT83kUwW9DMjSXXxu3KcZE29WBtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzFiMWJl NC1iY2MwLTRiMjEtODBkZi0yMDNkY2JmN2QzZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMWIxYmU0 LWJjYzAtNGIyMS04MGRmLTIwM2RjYmY3ZDNmYy8xL2xQemVSVEJiME15TkpkZkc3 Y3B4a1RiMVlHMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAeAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMTmjANBgkqhkiG9w0BAQsFAAOCAQEAaS+3Mf6sOsqKv2RlQAJfrRxqW7GR cCktB/orKlxXp8rVMDmsWh8Sgl4L+itXqdOTVfO8laSvbJVisAXc3O9eA1/Hnr// IFTmc8D6k4jPRy1uYiWhHQNpLx4tn4kUZ/l20QNwG3bE2ba4yHsFyZeKh0ZLzS+v v/TJHaGK6AOZk+ZSnugqgMWt1JtN6n9peArxzcI9SLZZXUm4koEhxJeFZTvS7OJb UniJNPmIF8j/+zpss/1XgvS4BSXhrqun9emqILX4dsx0hKsu+3oXOHQ0JUTfU8T6 Zfo4jGcmwhvB3+fPPCm2j7MEqWEsRNnuQDvyf1cwcVs85kdXWDtMVxcvSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:04 2026 by rpki-client